Archive
13 November 2019
Vulnerabilities first published on this day (UTC), newest first.
111 results · Feed
-
Unscored —
XSS exists in Lavalite CMS 5.7 via the admin/profile name or designation field.
-
Unscored —
index.php/team_members/add_team_member in RISE Ultimate Project Manager 2.3 has CSRF for adding authorized users.
-
Unscored —
In the Bootloader, there is a possible kernel command injection due to missing command sanitization. This could lead to…
-
Unscored —
In load_logging_config of qmi_vs_service.cc, there is a possible out of bounds write due to a heap buffer overflow. Thi…
-
Unscored —
poppler before 0.16.3 has malformed commands that may cause corruption of the internal stack.
-
Unscored —
NETGEAR WNR3500U and WNR3500L routers uses form tokens abased solely on router's current date and time, which allows at…
-
Unscored —
Parallels Plesk Panel 9.5 allows XSS in target/locales/tr-TR/help/index.htm? via the "fileName" parameter.
-
Unscored —
An integer overflow condition in poppler before 0.16.3 can occur when parsing CharCodes for fonts.
-
Unscored —
The Device Model in ACRN before 2019w25.5-140000p relies on assert calls in devicemodel/hw/pci/core.c and devicemodel/i…
-
Unscored —CVE-2012-2237 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.4.x before 1.4.3 and 1.5.x before 1.5.2 allow remote at…
-
Unscored —
A remote file include (RFI) issue was discovered in Enghouse Web Chat 6.2.284.34. One can replace the localhost attribu…
-
Unscored —
offlineimap before 6.3.4 added support for SSL server certificate validation but it is still possible to use SSL v2 pro…
-
Unscored —
An XSS issue was discovered in Enghouse Web Chat 6.1.300.31 and 6.2.284.34. The QueueName parameter of a GET request al…
-
Unscored —
The security team is marking this project unsupported. There is a known security issue with the project that has not be…
-
Unscored —
**Update:** This module had an access bypass vulnerability which has now been addressed by the module’s current maintai…
-
Unscored —
The security team is marking this project unsupported. There is a known security issue with the project that has not be…
-
Unscored —
Cross-site scripting (XSS) vulnerability in NETGEAR WNR3500U and WNR3500L.
-
Unscored —
The security team is marking this project unsupported. There is a known security issue with the project that has not be…
-
Unscored —
In binder_transaction of binder.c, there is a possible out of bounds write due to a missing bounds check. This could le…
-
Unscored —
In binder_free_transaction of binder.c, there is a possible use-after-free due to a race condition. This could lead to …
-
Unscored —
In okToConnect of HidHostService.java, there is a possible permission bypass due to an incorrect state check. This coul…
-
Unscored —CVE-2019-2198 Public exploit
In Download Provider, there is a possible SQL injection vulnerability. This could lead to local information disclosure …
-
Unscored —CVE-2019-2196 Public exploit
In Download Provider, there is possible SQL injection. This could lead to local information disclosure with no addition…
-
Unscored —
In BTA_DmPinReply of bta_dm_api.cc, there is a possible out of bounds read due to an incorrect bounds check. This could…
-
Unscored —
In PromiseBuiltinsAssembler::NewPromiseCapability of builtins-promise.cc, there is a possible out of bounds read in v8 …
-
Unscored —
In poisson_distribution of random, there is an out of bounds read. This could lead to local information disclosure with…
-
Unscored —
In nfa_hci_handle_admin_gate_rsp of nfa_hci_act.cc, there is a possible out of bound write due to missing bounds checks…
-
Unscored —
In getUserCount and getCount of UserSwitcherController.java, there is possible new user creation due to a logic error. …
-
Unscored —
In rw_i93_sm_set_read_only of rw_i93.cc, there is a possible out of bounds write due to a missing bounds check. This co…
-
Unscored —CVE-2019-2205 Public exploit
In ProxyResolverV8::SetPacScript of proxy_resolver_v8.cc, there is a possible memory corruption due to a use after free…
-
Unscored —
An issue was discovered in Enghouse Web Chat 6.1.300.31 and 6.2.284.34. A user is allowed to send an archive of their c…
-
Unscored —
In FindSharedFunctionInfo of objects.cc, there is a possible out of bounds read due to a mistake in AST traversal. This…
-
Unscored —
In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a heap buffer overflow. Th…
-
Unscored —
In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a heap buffer overflow. Th…
-
Unscored —
In generate_jsimd_ycc_rgb_convert_neon of jsimd_arm64_neon.S, there is a possible out of bounds write due to a missing …
-
Unscored —
In processPhonebookAccess of CachedBluetoothDevice.java, there is a possible permission bypass due to an insecure defau…
-
Unscored —
In createProjectionMapForQuery of TvProvider.java, there is possible SQL injection. This could lead to local informatio…
-
High 8.8
In Phoenix SCT WinFlash 1.1.12.0 through 1.5.74.0, the included drivers could be used by a malicious Windows applicatio…
-
Unscored —
Symlink Traversal vulnerability in NETGEAR WNR3500U and WNR3500L due to misconfiguration in the SMB service.
-
Unscored —
In createSessionInternal of PackageInstallerService.java, there is a possible permissions bypass. This could lead to lo…